
$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft
File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json)
Hash identifier: 6XCklCO6VjfomiXQxwnszMxh64wbFA/Or4KtlLBo0mU=
Subject key identifier: 48:42:D7:C2:EB:27:F7:F3:5F:3F:72:BE:72:3D:80:99:22:D4:D8:43
Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73
Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473
Certificate serial: 142F5CC73CB817255786CA3836133070C254B8D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft
Manifest number: F7
Signing time: Sat 28 Feb 2026 21:31:54 +0000
Manifest this update: Sat 28 Feb 2026 21:26:54 +0000
Manifest next update: Wed 04 Mar 2026 05:16:54 +0000
Files and hashes: 1: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: /zZ2on17NOU/iSQFleG0ArYusoIxXKCP8eQgSaivrnM=)
2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=)
3: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl
rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2f:5c:c7:3c:b8:17:25:57:86:ca:38:36:13:30:70:c2:54:b8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473
Validity
Not Before: Feb 28 21:26:54 2026 GMT
Not After : Mar 4 05:16:54 2026 GMT
Subject: CN=4842D7C2EB27F7F35F3F72BE723D809922D4D843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:46:f7:f5:e3:8d:62:60:b1:17:fd:ee:80:
f9:f1:62:fa:a2:0b:c4:32:22:73:ad:52:fd:e7:fd:
36:e7:e9:20:1c:89:2c:57:f4:e7:a8:d2:ac:82:55:
4d:6d:44:64:9a:f3:93:97:72:ce:da:ec:cb:56:b0:
b7:57:b4:e9:a2:7e:12:4c:41:2c:1d:98:35:c8:79:
6e:a9:32:0c:56:f9:b0:ee:ba:8c:4e:e3:15:ff:75:
d5:32:6c:43:0b:0c:f8:8e:4a:9f:a3:1e:62:e7:02:
00:b4:02:24:2e:a7:12:19:eb:60:53:9e:fe:99:9a:
26:b0:81:c5:b7:5a:cb:84:89:99:5b:e2:56:33:bc:
8e:da:91:66:9a:1c:e0:60:26:4c:f2:3d:da:e7:67:
b2:97:4c:e6:55:ac:76:20:c8:b5:4f:1a:9c:36:68:
12:dd:04:8b:19:dc:32:ec:56:ba:d4:79:bb:92:63:
95:b2:6f:89:fb:b1:e7:24:5b:2e:d4:4e:d8:bd:9a:
6d:d1:1a:49:fb:41:c4:4f:0f:ad:d8:ad:f8:01:01:
f1:25:38:78:1b:f0:5a:b7:2c:3d:35:22:2a:a5:35:
a8:0d:89:53:0b:16:cb:55:ad:04:5d:9a:6f:d5:01:
1c:72:ce:f2:a3:eb:f2:d9:59:cb:e0:36:45:39:94:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:D7:C2:EB:27:F7:F3:5F:3F:72:BE:72:3D:80:99:22:D4:D8:43
X509v3 Authority Key Identifier:
keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c0:8c:4c:14:b8:0c:9f:ba:47:36:fc:89:80:69:c0:db:ee:
b3:3e:9d:9c:11:1a:60:f5:a3:37:db:96:62:6d:f3:3d:5b:df:
c0:7e:4d:7b:07:dc:93:eb:e4:f9:cf:c1:76:7d:cb:ff:a1:b7:
26:c9:b6:70:8b:c6:84:9c:5d:7b:be:cb:d3:78:d2:a4:37:88:
68:8a:b2:8e:50:c5:fd:68:ed:9f:4a:67:54:3f:11:ea:de:42:
8c:fe:74:06:d1:77:dd:e7:5a:0f:55:ce:5e:d7:af:6f:5c:6e:
ea:d7:b5:8f:2f:bc:4d:6e:6a:3d:be:d0:42:dc:6a:a6:37:cf:
b5:53:e1:0e:00:af:77:91:8c:5f:10:46:15:a0:35:9e:36:fc:
8c:87:66:bf:0c:f3:98:e5:da:3c:e7:3d:92:c0:a8:28:7d:45:
85:e7:37:74:5c:34:90:9a:cf:a5:f6:8d:df:44:52:91:76:cf:
f9:aa:c7:0f:fc:da:af:75:b1:77:6a:e4:b0:3a:a1:9a:6a:12:
3b:af:56:48:85:8e:33:93:3b:0b:4c:8e:a4:55:15:9d:f1:82:
47:cf:58:9f:bf:c1:a0:af:fa:dc:88:eb:c9:59:c0:3e:c3:8c:
e1:b7:ff:8d:0a:ac:74:21:df:1a:e4:2d:50:98:45:09:61:69:
27:33:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:10 2026 by rpki-client